Australian Capital Territory
Health Records (Privacy and Access) Act 1997     No 125
Republication No 2
Republication date: 30 May 2002
Last amendment made by Act 2002 No 11
Amendments incorporated to 28 May 2002

Unauthorised version prepared by ACT Parliamentary Counsel's Office
About this republication
The republished law
This is a republication of the Health Records (Privacy and Access) Act 1997 as in force on 30 May 2002.  It includes any amendment, repeal or expiry affecting the republished law to 28 May 2002 and any amendment made under the Legislation Act 2001, part 11.3 (Editorial changes).  
The legislation history and amendment history of the republished law are set out in endnotes 3 and 4. 
Kinds of republications
The Parliamentary Counsel’s Office prepares 2 kinds of republications of ACT laws (see the ACT legislation register at www.legislation.act.gov.au):
•	authorised republications to which the Legislation Act 2001 applies
•	unauthorised republications.
The status of this republication appears on the bottom of each page.
Editorial changes
The Legislation Act 2001, part 11.3 authorises the Parliamentary Counsel to make editorial amendments and other changes of a formal nature when preparing a law for republication.  Editorial changes do not change the effect of the law, but have effect as if they had been made by an Act commencing on the republication date (see Legislation Act 2001, s 115 and s 117).  The changes are made if the Parliamentary Counsel considers they are desirable to bring the law into line, or more closely into line, with current legislative drafting practice.  
When preparing the authorised version of this republication amendments were not made under part 11.3 (see endnote 1).
Uncommenced provisions and amendments
If a provision of the republished law has not commenced or is affected by an uncommenced amendment, the symbol  U  appears immediately before the provision heading.  The text of the uncommenced provision or amendment appears only in the last endnote.
Modifications
If a provision of the republished law is affected by a current modification, the symbol  M  appears immediately before the provision heading.  The text of the modifying provision appears in the endnotes.  For the legal status of modifications, see Legislation Act 2001, section 95.
Penalties
The value of a penalty unit for an offence against this republished law at the republication date is—
	(a)	if the person charged is an individual—$100; or
	(b)	if the person charged is a corporation—$500.

Amendments incorporated to
28 May 2002

Australian Capital Territory
Health Records (Privacy and Access) Act 1997

Contents
	Page
Part 1	Preliminary
	1	Short title	2
	3	Objects of Act	2
	4	Definitions for Act	2
Part 2	Privacy provisions
	5	The privacy principles	9
	6	Compliance with privacy principles	19
	7	Consent by consumer to obtaining personal health information etc or health status report	20
Part 3	Access to personal health information
	8	Access otherwise than under pt 3	22
	9	Pt 3 not to prevent alternative arrangements	22
	10	Statement of principle regarding right of access	23
	11	Provision of health services and keeping of records—terms and conditions	25
	12	Requests for access	26
	13	Response to request	27
	14	Grounds for nonproduction	30
	15	No access to health record where risk to life or health of consumer or another person	31
	16	Refusal on ground of risk to life or health of consumer	31
	17	No access to health record where material given in confidence	34
Part 4	Complaints and requests to review
	18	Grounds	36
	19	Application of Community and Health Services Complaints Act 1993	37
Part 5	Offences
	20	Unlawfully requiring consent etc	38
	21	Unlawful destruction etc. or removal of health records	38
	22	Unlawfully requesting or obtaining access to health records	39
	23	Persons not to be unlawfully penalised	39
	24	Conduct of directors, servants and agents	39
Part 6	Miscellaneous
	25	Young persons	42
	26	Legally incompetent persons	42
	27	Deceased consumers	42
	29	Defect or invalidity—protection if person acts in good faith etc	43
	30	Unqualified record keeper to obtain and act on expert advice	43
	31	Jurisdiction of Magistrates Court	43
	32	Appeals	45
	33	Court orders under other laws	46
	34	Determination of fees	46
	35	Approved forms	46
	36	Regulation-making power	46
	37	Saving	47
Endnotes
	1	About the endnotes	48
	2	Abbreviation key	48
	3	Legislation history	49
	4	Amendment history	49
	5	Earlier republications	50

Amendments incorporated to
28 May 2002

Australian Capital Territory
Health Records (Privacy and Access) Act 1997

An Act to provide for the privacy and integrity of, and access to, personal health information, and for related purposes

    

Part 1	Preliminary
1	Short title
This Act may be cited as the Health Records (Privacy and Access) Act 1997.
3	Objects of Act
The objects of this Act are—
	(a)	to provide for privacy rights in relation to personal health information; and
	(b)	to provide for the integrity of records containing personal health information; and
	(c)	to provide for access to personal health information contained in health records; and
	(d)	to provide for a consumer to receive an explanation of the consumer’s personal health information; and
	(e)	to encourage agreement, concerning the exercise of a right or performance of an obligation under this Act, between the persons concerned.
4	Definitions for Act
In this Act:
Note	A definition applies except so far as the contrary intention appears (see Legislation Act 2001, s 155).
child, in relation to a person, includes an adopted child or stepchild of the person.
collector means a person who, in the course of his or her profession, employment or official duty, collects personal health information.
commissioner means the commissioner for health complaints.
consent includes implied consent.
consumer means an individual—
	(a)	who uses, or has used, a health service; or
	(b)	in relation to whom a health record has been created;
	and includes—
	(c)	a person authorised by the consumer under section 13 (7) to have access to the health record; and
	(d)	where the consumer is a young person or a legally incompetent person—a guardian of the consumer; and
	(e)	where the consumer has died—a legal representative of the deceased consumer.
deceased consumer means a deceased person who, before his or her death, was a consumer.
disability—see the Community and Health Services Complaints Act 1993.
factual matter, in relation to a consumer, means—
	(a)	a history of the health, an illness or a disability of the consumer; or
	(b)	any findings on an examination of the consumer in relation to the health, an illness or a disability of the consumer; or
	(c)	the results of any investigation into the health, an illness or a disability of the consumer; or
	(d)	a diagnosis, or preliminary diagnosis, of an illness or disability of the consumer; or
	(e)	a plan of management, or proposed plan of management, of the treatment or care of an illness or disability of the consumer; or
	(f)	any action taken (whether or not in accordance with a plan of management) by or under the direction or referral of a health service provider in relation to the consumer.
false representation means a representation that is—
	(a)	false in a material particular; and
	(b)	made—
	(i)	with knowledge that it is false in that particular; or
	(ii)	without belief that it is true in that particular.
guardian means—
	(a)	in relation to a young person—a parent or legally appointed guardian of the young person; or
	(b)	in relation to a legally incompetent person—a person who is—
	(i)	a legally appointed guardian of the legally incompetent person; or
	(ii)	an attorney, appointed under an enduring power of attorney that has become operative, of the legally incompetent person;
		and who has power to make decisions about the medical treatment or health care of the legally incompetent person.
health record means  any record—
	(a)	held by a health service provider and containing personal information; or
	(b)	containing personal health information;
and includes a part, or parts, of such a record.
health service means—
	(a)	any activity that is intended or claimed (expressly or by implication), by the person performing it, to assess, record, improve or maintain the physical, mental or emotional health of a consumer or to diagnose or treat an illness or disability of a consumer; or
	(b)	a disability, palliative care or aged care service that involves the making or keeping of personal health information;
but does not include any service that, under the regulations, is an exempt service.
health service provider means a person (including a body corporate, government agency or other body) that provides a health service in the ACT.
health status report means a report—
	(a)	that is prepared or substantially prepared—
	(i)	by a health service provider; and
	(ii)	in respect of a consumer who, at the time of the preparation of the report, resides or is present in the ACT; and
	(b)	that relates to the physical, mental or emotional health of a consumer, or a disability or disease of a consumer; and
	(c)	whose purpose, or main purpose, is not a health service for the consumer.
illness means a physical, mental or emotional illness, and includes a suspected illness.
immediate family member, in relation to a consumer, means a person who—
	(a)	is—
	(i)	a parent of the consumer; or
	(ii)	a spouse or de facto spouse of the consumer; or
	(iii)	a child or sibling, at least 18 years of age, of the consumer; or
	(b)	is—
	(i)	another relative of the consumer; or
	(ii)	a close friend of the consumer;
		and a member of the same household as the consumer.
law of the Territory does not include this Act or the common law.
legally incompetent person means a person who is subject—
	(a)	to an enduring power of attorney that has become operative; or
	(b)	otherwise than as a person under the age of majority to a guardianship order.
legal representative, in relation to a deceased person, means a person—
	(a)	holding office as executor of the will of the deceased person where probate of the will has been granted or resealed in Australia; or
	(b)	holding office in Australia as administrator of the estate of the deceased person.
medical board means the board established by the Medical Practitioners Act 1930, section 7.
order of a court of competent jurisdiction includes a subpoena or similar process of such a court.
parent, in relation to a person, includes a step-parent or adoptive parent of the person.
personal health information, in relation to a consumer, means any personal information—
	(a)	relating to the health, an illness or a disability of the consumer; or
	(b)	collected by a health provider in relation to the health, an illness or a disability of the consumer;
whether or not the information is recorded in a health record.
personal information, in relation to a consumer, means any information, recorded or otherwise, about the consumer where the identity of the consumer is apparent, whether the information is—
	(a)	fact or opinion; or
	(b)	true or false.
record means a record in documentary or electronic form that consists of or includes personal health information in relation to a consumer, and includes—
	(a)	a photograph or other pictorial or digital representation of any part of the consumer; and
	(b)	test results, medical imaging materials and reports, and clinical notes, relating to the consumer; and
	(c)	a part, or parts, of any such record; and
	(d)	a copy of any such record, part or parts;
	but does not include research material that does not disclose the identity of the consumer.
record keeper means a person (including a body corporate, government agency or other body) that has possession or control of a health record.
registration board means a board specified in, or prescribed under, the Community and Health Services Complaints Act 1993, section 4 (1), definition of board.
sibling, in relation to a person, means a brother, sister, half-brother, half-sister, adoptive brother, adoptive sister, stepbrother or stepsister of the person.
treating health service provider, in relation to a consumer, means a health service provider who is involved in diagnosis, care or treatment of the consumer for the purpose of improving or maintaining the consumer’s health.
treating team, in relation to a consumer, means health service providers involved in diagnosis, care or treatment for the purpose of improving or maintaining the consumer’s health for a particular episode of care, and includes—
	(a)	if the consumer named another health service provider as his or her current treating practitioner—that other health service provider; and
	(b)	if another health service provider referred the consumer to the treating team for that episode of care—that other health service provider.
young person means a person under 18 years of age, other than a person who is of sufficient age, and of sufficient mental and emotional maturity, to—
	(a)	understand the nature of a health service; and
	(b)	give consent to a health service.

Part 2	Privacy provisions
5	The privacy principles
Subject to this Act, the following privacy principles have the force of law:
	The privacy principles
	Principle 1: Manner and purpose of collection of personal health information
	1	A collector shall not collect personal health information for inclusion in a health record or in a generally available publication unless—
	(a)	the information is collected for a lawful purpose that is directly related to a function or activity of the collector; and
	(b)	the collection of the information is necessary for or directly related to that purpose.
	2	A collector shall not collect personal health information by unlawful or unfair means.
	3	Where personal health information or health records are required to be collected by someone as part of his or her employment for the management, funding or quality of a health service received by the consumer, then that person is allowed access to the information only for those purposes, unless these principles otherwise provide.
	Principle 2: Purpose of collection of personal health information to be made known
	1	Subject to clause 2 of this principle, where—
	(a)	a collector collects personal health information for inclusion in a health record or in a generally available publication; and
	(b)	the information is solicited by the collector from the consumer concerned;
the collector shall take such steps (if any) as are reasonable in the circumstances to ensure that, before the information is collected or, if that is not practicable, as soon as practicable after the information is collected, the consumer is generally aware of—
	(c)	the purpose for which the information is being collected; and
	(d)	if the collection of the information is required or authorised by law—the fact that the collection of the information is so required or authorised; and
	(e)	unless it is obvious from the circumstances of any health service provided—the identity of all members of the treating team who will have access to the consumer’s personal health information; and
	(f)	the identity of any person to whom, or agency to which, the collector would, in accordance with the collector’s usual practice, disclose the information for inclusion in a health record or in a generally available publication; and
	(g)	if it is, to the knowledge of the collector, the usual practice of any such person or agency to pass on such information to other persons or agencies—the identity of each of those other persons or agencies.
	2	The collector is not required to notify the consumer of the identity of individuals, or classes of individuals, who are employed by the collector and who are required for the management, funding or quality of the health service received by the consumer to handle health records or personal health information as part of their employment.
	Principle 3: Solicitation of personal health information generally
Where—
	(a)	a collector collects personal health information about a consumer for inclusion in a record or in a generally available publication; and
	(b)	the information is solicited by the collector;
the collector shall take such steps (if any) as are reasonable in the circumstances to ensure that, having regard to the purpose for which the information is collected—
	(c)	the information is relevant, up to date and accurate; and
	(d)	the collection of the information does not intrude to an unreasonable extent upon the personal affairs of the consumer.
	Principle 4: Storage and security of personal health information
A record keeper who has possession or control of a health record shall ensure that—
	(a)	the record is protected, by such security safeguards as are reasonable in the circumstances, against—
	(i)	loss; and
	(ii)	unauthorised access, use, modification or disclosure; and
	(iii)	other misuse; and
	(b)	if the record is given to another person—everything reasonably within the power of the record keeper is done to prevent unauthorised use or disclosure of any information contained in the record.
	Principle 5: Information relating to records kept by record keeper
	1	A record keeper who has possession or control of health records shall, subject to clause 2 of this principle, take such steps as are reasonable in the circumstances to enable any consumer to ascertain—
	(a)	whether the record keeper has possession or control of any health records, or personal health information, relating to the consumer; and
	(b)	if so—
	(i)	the nature of the records or information; and
	(ii)	the main purposes for which the records are, or the information is, used; and
	(iii)	the steps that the person should take if the person wishes to obtain access to the records or the information.
	2	A record keeper is not required to give a person information if, under a law of the Territory (including this Act) or a law of the Commonwealth, the record keeper is required or authorised to refuse to give that information to the person.
	Principle 6:	Access to health records by persons other than the consumer
	1	A health service provider who is a member of a treating team may have access to the personal health information of a consumer so far as is reasonably necessary for the provision by that provider of a health service to that consumer.
	2	If a person reasonably requires access, for the purpose of the management, funding or quality of a health service received, or being received, by a consumer, to personal health information relating to the consumer, the person may have such access, without the consent of the consumer, to the extent reasonably necessary for that purpose.
	3	Except where required or authorised by—
	(a)	a law of the Territory; or
	(b)	a law of the Commonwealth; or
	(c)	an order of a court of competent jurisdiction;
a person or agency shall not require a consumer, whether directly or indirectly, to obtain or grant access to any health record relating to the consumer.
	Principle 7:	Alteration of health records
	1	A person shall not delete information from a health record, even where it is later found or claimed to be inaccurate, unless the deletion is part of a program of archival destruction.
	2	A record keeper who has possession or control of a health record shall take such steps, by way of making appropriate corrections and additions as are reasonable in the circumstances, to ensure that the record is—
	(a)	up to date and accurate; and
	(b)	relevant to the purpose for which the information was collected or is to be used and to any other purpose that is directly related to that purpose.
	3	Where—
	(a)	the record keeper of a health record is not willing to amend that record, by making a correction or an addition, in accordance with a request by the consumer concerned; and
	(b)	no decision or recommendation to the effect that the record should be amended wholly or partly in accordance with that request is pending, or has been made, under a law of the Territory (including this Act) or a law of the Commonwealth;
the record keeper shall, if the consumer gives to the record keeper a written statement concerning the requested correction or addition, take such steps as are reasonable in the circumstances to include the statement in the record.
	4	Where the record keeper accepts the need to amend the health record but—
	(a)	the record keeper considers it likely that leaving incorrect information on a health record, even if corrected, could cause harm to the consumer or result in incorrect health care treatment or assistance being provided; or
	(b)	the form in which the record is held makes correction impossible; or
	(c)	the corrections required are sufficiently complex or numerous for a real possibility of confusion or error to arise in relation to interpreting or reading the record if it were to be so amended;
the record keeper shall place the incorrect information on a record which is not generally available to the consumer’s treating practitioner or treating team, and to which access is restricted, and take such steps as are reasonable in the circumstances to ensure that only the corrected copy is generally available to the practitioner or treating team.
	Principle 8: Record keeper to check accuracy etc of personal health information before use etc
	1	A record keeper who has possession or control of a health record shall not use personal health information in that record without taking such steps (if any) as are reasonable in the circumstances to ensure that, having regard to the purpose for which the information is proposed to be used, the information is up to date and accurate.
	2	Where a person gives information in confidence to a health service provider about a consumer, the provider shall—
	(a)	encourage the person to waive the requirement of confidentiality; and
	(b)	if the information remains confidential—
	(i)	record the information only if it is likely to assist in the treatment or care of the consumer; and
	(ii)	take such steps (if any) as are reasonable in the circumstances to ensure that the information is accurate and not misleading.
	Principle 9: Limits on use of personal health information
	1	Except where personal health information is being shared between members of a treating team to the extent necessary to improve or maintain the consumer’s health or to manage a disability of the consumer, a record keeper who has possession or control of a health record that was obtained for a particular purpose shall not use the information for any other purpose unless—
	(a)	the consumer has consented to use of the information for that other purpose; or
	(b)	the record keeper believes on reasonable grounds that use of the information for that other purpose is necessary to prevent or lessen a significant risk to the life or physical, mental or emotional health of the consumer or another person; or
	(c)	use of the information for that other purpose is required or authorised by—
	(i)	a law of the Territory; or
	(ii)	a law of the Commonwealth; or
	(iii)	an order of a court of competent jurisdiction;
	(d)	the purpose for which the information is used is directly related to the purpose for which the information was obtained; or
	(e)	the use of the information is related to the management, funding or quality of the health service received by the consumer.
	2	In relation to the sharing of information among a treating team, unless it is obvious from the circumstances or context of the health service, the person in charge of the treating team shall inform the consumer of the identity of all members of the treating team who will have access to the consumer’s personal health information.
	3	The treating team leader is not required to notify the consumer of the identity of individuals, or of classes of individuals, who are required for the management, funding or quality of the health service received by the consumer to handle health records or personal health information.
	Principle 10: Limits on disclosure of personal health information
	1	Except where personal health information is being shared between members of a treating team only to the extent necessary to improve or maintain the consumer’s health or manage a disability of the consumer, a record keeper who has possession or control of a health record shall not disclose the information to a person or agency (other than the consumer) unless—
	(a)	the consumer is reasonably likely to have been aware, or made aware under principle 2, that information of that kind is usually passed to that person or agency; or
	(b)	the consumer has consented to the disclosure; or
	(c)	the record keeper believes on reasonable grounds that the disclosure is necessary to prevent or lessen a serious and imminent risk to the life or physical, mental or emotional health of the consumer or of another person; or
	(d)	the disclosure is required or authorised by—
	(i)	a law of the Territory (including this Act);
	(ii)	a law of the Commonwealth; or
	(iii)	an order of a court of competent jurisdiction; or
	(e)	the disclosure of the information is necessary for the management, funding or quality of the health service received by the consumer.
	2	In relation to the sharing of information among the treating team, unless it is obvious from the circumstances and context of the health service, the person in charge of the treating team shall inform the consumer about the identity of all members of the treating team who will have access to the consumer’s personal health information.
	3	The treating team leader is not required to notify the consumer of the identity of individuals or of classes of individuals, who are required for the management, funding or quality of the health service received by the consumer, to handle health records or personal health information.
	4	A person, body or agency to whom information is disclosed under clause 1 of this principle shall not use or disclose the information for a purpose other than the purpose for which the information was given to the person, body or agency.
	5	Where there is an emergency and a consumer is unable to give or withhold consent to the disclosure of personal health information, the treating health service provider may discuss relevant personal health information with an immediate family member of the consumer to the extent that it is reasonable and necessary to do so for the proper treatment of the consumer.
	Principle 11: Transfer or closure of practice of health service provider
	1	This principle applies if the practice of a health service provider (the provider) is, or is proposed to be—
	(a)	sold or otherwise transferred; or
	(b)	closed down.
	2	The provider or, if the provider is deceased, the legal representatives of the provider, shall—
	(a)	publish a notice in a newspaper circulating in the locality of the practice stating that—
	(i)	the practice has been, or is about to be, transferred or closed down (as the case may be); and
	(ii)	the health records of the practice, other than those returned to a consumer or passed on to a nominated practitioner at the consumer’s request, will be transferred to a specified person (being a person to whom clause 3 (a) or (b) of this principle applies) at a specified address; and
	(b)	take such other steps as are practicable to inform every such consumer—
	(i)	that the practice has been, or is about to be, transferred or closed down (as the case may be); and
	(ii)	about the arrangements (as stated in the notice under paragraph (a)) for dealing with those health records.
	3	Not earlier than 21 days after giving notice in accordance with clause 2 of this principle, the person or persons giving the notice shall transfer each health record held by, or on behalf of, the practice—
	(a)	to the health service provider (if any) who takes over the practice;
	(b)	to a competent record keeper for safe storage in the Territory (until such time (if any) as the record is destroyed as part of a program of archival destruction); or
	(c)	to the consumer to whom the record relates or to a practitioner nominated by that consumer.
	4	Subject to the restriction stated in clause 3 of this principle, a person shall comply with the requirements of this principle as soon as practicable.
	5	Despite any other provision of these principles, a person who transfers a health record in accordance with this principle does not, by so doing, contravene these principles.
	Principle 12: Transfer of consumer to another health service provider or of health service provider to another practice
	1	Where—
	(a)	a consumer transfers from one health service provider to another; or
	(b)	a health service provider transfers from one practice to another and a consumer continues to see the provider;
the record keeper shall, on request, provide the consumer’s health record, or a copy or written summary of it—
	(c)	if paragraph (a) applies—to the health service provider to whom the consumer has transferred; or
	(d) 	if paragraph (b) applies—to the relevant health service provider.
	2	The amount of a fee that is chargeable for providing, in accordance with clause 1 of this principle, a copy of a health record, or a written summary of a health record, is—
	(a)	if the Minister determines, under section 34, a fee for the purposes of this principle—an amount not exceeding the amount of the fee so determined; or
	(b)	in any other case—nil.
6	Compliance with privacy principles
	(1)	A person to whom a privacy principle applies shall not, without lawful authority, contravene the privacy principle.
	(2)	A person is taken not to have lawful authority to contravene a privacy principle unless the person proves that, in the circumstances, compliance with the privacy principle would have contravened—
	(a)	a law of the Territory; or
	(b)	a law of the Commonwealth; or
	(c)	an order of a court of competent jurisdiction.
7	Consent by consumer to obtaining personal health information etc or health status report
	(1)	A person shall not, without the consent of the consumer—
	(a)	request a health status report, in relation to a consumer, from a person other than the consumer; or
	(b)	provide a health status report, in relation to a consumer, to a person other than the consumer.
	(2)	A person shall not, without the consent of the consumer, obtain a health status report in relation to a consumer from a health service provider.
	(3)	Where a person requests or obtains the consent of a consumer to requesting or obtaining a health status report in relation to the consumer, the person shall—
	(a)	inform the consumer in writing of the right of the consumer to request a copy of the health status report; and
	(b)	if the consumer so requests—as soon as practicable give a copy of the health status report to the consumer; and
	(c)	if the consumer gives to the person a statement containing comments by the consumer in relation to the health status report—
	(i)	give due consideration to the comments; and
	(ii)	retain the statement for as long as the person retains the report.
	(4)	A consent given by a consumer for subsection (1) or (2) shall—
	(a)	be in writing and signed—
	(i)	if the consumer is a young person or a legally incompetent person—by a guardian of the consumer; or
	(ii)	in any other case—by the consumer; and
	(b)	if the health service report is to be, or has been, prepared or substantially prepared by a health service provider—specify the name of the health service provider.
	(5)	This section does not apply to the extent (if any) that a health status report is requested, obtained or provided in accordance with—
	(a)	a law of the Territory; or
	(b)	a law of the Commonwealth; or
	(c)	an order of a court of competent jurisdiction.

Part 3	Access to personal health information
8	Access otherwise than under pt 3
	(1)	A health service provider may allow a consumer to have access otherwise than in accordance with this part to a health record relating to the consumer.
	(2)	Subsection (1) applies—
	(a)	subject to any prohibition, under section 15 or 17, on giving access to a health record; and
	(b)	except as stated in paragraph (a)—despite any other provision of this part.
9	Pt 3 not to prevent alternative arrangements
	(1)	Where, under a provision of this part, a person has a right or obligation to—
	(a)	do an act in relation to another person in a specified way, or within a specified period; or
	(b)	give a notice to another person in a specified way, or within a specified period;
the firstmentioned person and the other person may make an agreement for the act to be done or the notice to be given, as the case may be, in another way or within a longer period.
	(2)	If such an agreement is made, and—
	(a)	the act is done in accordance with the agreement; or
	(b)	the notice is given in accordance with the agreement;
the firstmentioned person is taken—
	(c)	to have performed the act in the way specified in the provision; or
	(d)	to have given the notice within the time specified in the provision;
as the case may be.
10	Statement of principle regarding right of access
	(1)	A consumer has a right of access, in accordance with this Act, to a health record that is—
	(a)	a health record held by a health service provider; or
	(b)	to the extent that it contains personal health information relating to the consumer, any other health record;
as follows:
	(c)	to the extent that the record contains factual matters, whenever the record was made;
	(d)	to the extent that the record contains matters of opinion, if the record was created on or after the date of commencement of this Act.
	(2)	Subsection (1) does not apply—
	(a)	in relation to a health record to the extent that access to the record would contravene—
	(i)	a law of the Territory; or
	(ii)	a law of the Commonwealth; or
	(iii)	an order of a court of competent jurisdiction; or
	(b)	to the extent that section 14, 15 or 17 has a contrary application.
	(3)	A right of access may be exercised in any of the following ways:
	(a)	by inspecting the health record or, if the health record is stored in electronic form, a print-out of the health record, and having the opportunity to take notes of its contents;
	(b)	by receiving a copy of the health record; 
	(c)	by viewing the health record, and having its content explained by—
	(i)	if the relevant record keeper is a suitably qualified health service provider, and is willing to do so—the record keeper; or
	(ii)	in any other case—a suitably qualified health service provider who practises in the Territory, is nominated by the record keeper and has consented to being so nominated.
	(4)	Subject to subsection (5), where the record keeper receives a request under section 12, the record keeper shall—
	(a)	in the case of a request that specifies access of a kind mentioned in subsection (3) (a) or (b)—provide access in accordance with the relevant paragraph; or
	(b)	in the case of a request that specifies access of the kind mentioned in subsection (3) (c)—
	(i)	if subsection (3) (c) (i) applies—provide access in accordance with subsection (3) (c); or
	(ii)	if subsection (3) (c) (i) does not apply—nominate a suitable health service provider for subsection (3) (c).
	(5)	The right of access is subject, in the case of access in a way mentioned in subsection (3) (b) or (c), to the payment of any fee or charge payable under this Act.
	(6)	Where the consumer is under 18 years of age, the right of access conferred by subsection (1) is exercisable—
	(a)	if the consumer does not have the status under this Act of a young person—by the consumer personally; or
	(b)	in any other case—on behalf of the consumer by a guardian of the consumer.
	(7)	Where the consumer is a legally incompetent person, the right of access conferred by subsection (1) is exercisable on behalf of the consumer by a guardian of the consumer.
11	Provision of health services and keeping of records—terms and conditions
	(1)	It is a term of a contract, whether oral or in writing, for the provision of a health service to a consumer that the health service provider will allow the consumer to have access, in accordance with this Act, to a health record relating to the consumer that relates to, or is made in consequence of the provision of, the service.
	(2)	Subsection (1) applies to a contract—
	(a)	only if the contract is made on or after the date of commencement of this Act, and at least 1 of the following circumstances applies:
	(i)	the contract is made in the ACT; 
	(ii)	the contract has been, or is to be, performed wholly or partly in the ACT;
	(iii)	the consumer is present, or resides, in the ACT when the contract is made; and
	(b)	whether or not the consumer is a party to the contract.
	(3)	Where a health record relating to a consumer is kept or located in the ACT, the record keeper shall allow the consumer to have access, in accordance with this Act, to the record.
	(4)	Where a health service provider provides a health service to a consumer, the provider shall allow the consumer to have access, in accordance with this Act, to a health record relating to the consumer that relates to, or is made in consequence of the provision of, the service.
	(5)	The application of subsection (3) or (4) in a particular instance is not affected by the application or otherwise of subsection (1) in that instance.
	(6)	For this section, it is immaterial whether—
	(a)	the health service in question was provided in the ACT; or
	(b)	except in the case of subsection (3)—the health record in question is kept or located in the ACT.
	(7)	If a contract or other agreement purports to exclude, or is inconsistent with, a provision of this section, the contract or agreement is, to that extent, void.
	(8)	This section applies subject to section 10.
12	Requests for access
	(1)	A consumer who has a right of access under section 10 to a health record may ask the record keeper for access to the record.
	(2)	A request shall—
	(a)	state the name and, unless it is already known to the record keeper, the address, of the consumer; and
	(b)	sufficiently identify the health record to which access is sought; and
	(c)	specify the way in which the consumer wishes to have access, being a way mentioned in section 10 (3); and
	(d)	be in writing if it is—
	(i)	a request by a guardian of a young person unless, in the period of 12 months before making the request, the guardian consented to the treatment of the young person that gave rise to the health record that is the subject of the request; or
	(ii)	a request by a guardian of a legally incompetent person; or
	(iii)	a request by a legal representative of a deceased consumer.
	(3)	In the case of an oral request, the record keeper—
	(a)	may ask the consumer to make the request in writing; and
	(b)	if the record keeper does so—need not take any further action in respect of the oral request.
13	Response to request
	(1)	This section applies if a record keeper receives a request under section 12, other than an oral request in respect of which the record keeper has made a request under section 12 (3) (a), in respect of a health record (the record).
	(2)	Within 14 days after receiving  a request, the record keeper shall—
	(a)	unless paragraph (b) or (c) applies, either—
	(i)	give access to the record in accordance with subsections (4) and (5); or
	(ii)	if the Minister has determined, under section 34, a fee payable for giving such access—give a notice in writing to the consumer stating that the record keeper will give access to the record on payment of a specified fee (being a fee not exceeding the fee so determined);
	(b)	if the record keeper relies on a ground specified in section 14 for nonproduction of the record or a part of the record—give a notice in writing to the consumer stating the ground for nonproduction of the record; or
	(c)	if, on a ground specified in section 15 or 17, the record keeper is prohibited from giving access to the record or a part of the record—give a notice in writing to the consumer stating the ground on which the record keeper is so prohibited.
	(3)	If the record keeper gives a notice under subsection (2) (b) or (c) that relates only to a part of the record, the record keeper shall comply with subsection (2) (a) in respect of the remainder of the record.
	(4)	Subject to subsection (8), the time within access shall be given is—
	(a)	if—
	(i)	the record keeper has given a notice under subsection (2) (a) (ii); and
	(ii)	the fee specified in the notice is paid; 
		the later of—
	(iii)	7 days after receiving payment of the fee; or
	(iv)	30 days after receiving the request; or
	(b)	if the record keeper has not given a notice under subsection (2) (a) (ii)—30 days after receiving the request.
	(5)	Access shall be given as follows:
	(a)	in the case of a request to inspect the record, or a print-out of the record—by making the record or print-out available to the consumer at a time, and at a place in the ACT, specified in a notice in writing given to the consumer;
	(b)	in the case of a request to receive a copy of the record—by giving to the consumer—
	(i)	a copy of the record; or
	(ii)	if the consumer agrees—an accurate summary of the record; or
	(iii)	if the record, or a part of the record, was made before the date of commencement of this Act and the record keeper does not give a copy of the record to the consumer—a written summary of the factual matters contained in the record or part of the record;
	(c)	in the case of a request to view the record and have its content explained—by giving the consumer a notice stating—
	(i)	if the record keeper is a suitably qualified health service provider, and is willing to do so—that the record keeper will be available to explain the health information at a time, and at a place in the ACT, specified in the notice;  or
	(ii)	in any other case—the name and address of a suitable health service provider who will be available in the ACT with the record, by arrangement with the consumer, to explain the health information.
	(6)	A person giving an explanation for subsection (5) (c) (i) or (ii) may make a charge for the service that does not exceed the amount of the person’s usual charge for a consultation of a comparable duration.
	(7)	Where a consumer—
	(a)	has a right of access; and
	(b)	has given an authority in writing, signed by the consumer, to the record keeper to provide access to a person named in the authority;
the access shall be given to the person so named.
	(8)	The record keeper is entitled, before giving access to the record to a person (the relevant person), to require—
	(a)	proof of identity of the relevant person; and
	(b)	if another person has authorised the access to be given to the relevant person—proof of identity and authority of that other person; and
	(c)	if the consumer is a legally incompetent person, a young person or a deceased consumer—proof that the relevant person or, if paragraph (b) applies, the person authorising the relevant person, is—
	(i)	in the case of a legally incompetent person or a young person—a guardian of the person; or
	(ii)	in the case of a deceased consumer—a legal representative of the deceased consumer.
	(9)	A record keeper is taken to have refused access to the record—
	(a)	if the record keeper fails to comply with a requirement of this section; or
	(b)	in the case of a notice given by the record keeper under subsection (5) (a) or (c) (i)—
	(i)	if the notice does not specify a date and time that, in all the circumstances, are reasonable; or
	(ii)	if the record keeper unreasonably fails to allow inspection of the record, or to give a reasonable explanation, as the case requires, in accordance with the notice; or
	(c) 	in the case of a notice given by the record keeper under subsection (5) (c) (ii)—if the health service provider specified in the notice unreasonably fails—
	(i)	to make an arrangement with the consumer to explain the health information; or
	(ii)	to comply with an arrangement so made.
14	Grounds for nonproduction
The grounds for nonproduction of the whole or any part of a health record are as follows:
	(a)	that the record or part of the record is not in the possession, custody or control of the person alleged to be the record keeper;
	(b)	that the record or part of the record does not relate in any respect to the consumer;
	(c)	that the production of, or the giving of access to, the record or part of the record would contravene—
	(i)	a law of the Territory; or
	(ii)	a law of the Commonwealth; or
	(iii)	an order of a court of competent jurisdiction.
15	No access to health record where risk to life or health of consumer or another person
A record keeper shall not give access to a health record or part of a health record if the record keeper believes, on reasonable grounds, that the provision of information in the record or part of the record would constitute a significant risk to the life or the physical, mental or emotional health of—
	(a)	the consumer;  or
	(b)	any other person.
16	Refusal on ground of risk to life or health of consumer
	(1)	This section applies if a record keeper has given a notice under section 13 (2) (c), in respect of a health record, on the ground stated in section 15 (a).
	(2)	If the record keeper considers that it would be desirable for a suitably qualified health service provider to discuss the health record with the consumer, the record keeper may include in, or attach to, the relevant notice to the consumer under section 13 (2) (c), an offer—
	(a)	if the record keeper is a suitably qualified health service provider—to discuss the health record with the consumer; or
	(b)	whether or not paragraph (a) applies, to arrange for a specified health service provider, being a provider who practises in the ACT, is suitably qualified and has consented to being so nominated, to do so.
	(3)	Where—
	(a)	the record keeper does not make such an offer; or
	(b)	if such an offer is made—the consumer does not accept it; or
	(c)	if such a discussion is held—the consumer is not satisfied with the outcome of the discussion;
the consumer may give a notice in writing to the record keeper nominating, for this section, a health service provider who has consented to being so nominated.
	(4)	Subject to subsection (5), if—
	(a)	a record keeper receives a notice under subsection (3) nominating a health service provider; and
	(b)	the record keeper believes on reasonable grounds that the nominated health service provider is not a suitable person to act under this section as the nominated health service provider;
the record keeper may, within 14 days after receiving the notice, give a notice in writing to the consumer—
	(c)	stating that the record keeper objects to the nominated health service provider and specifying the ground of the objection; and
	(d)	if the record keeper considers it appropriate to do so—suggesting the class of health service providers from which a health service provider should be nominated.
	(5)	Subsection (4) does not apply in any of the following cases:
	(a)	where—
	(i)	the health service provider who wrote the health record is registered with a registration board; and
	(ii)	the nominated health service provider is registered with the same board;
	(b)	where the nominated health service provider is registered with the medical board and has the ability to understand and interpret the health record;
	(c)	in any other case—where the nominated health service provider—
	(i)	provides the same kind of service as the health service provider who wrote the health record; and
	(ii)	has the ability to understand and interpret the health record.
	(6)	The nomination of a health service provider lapses if—
	(a)	the record keeper gives a notice in accordance with subsection (4); or
	(b)	the nominated health service provider—
	(i)	dies; or
	(ii)	ceases to be a health service provider; or
	(iii)	refuses, or fails within a reasonable time, to act.
	(7)	If a nomination lapses, the consumer may make another nomination under subsection (3).
	(8)	If a record keeper receives a notice under subsection (3) nominating a health service provider, the record keeper shall give the health record, or a copy of it, to the nominated health service provider within 14 days after receiving the notice unless, within that period—
	(a)	the record keeper gives a notice under subsection (4) in respect of the firstmentioned notice; or
	(b)	the firstmentioned notice lapses.
	(9)	The functions of a nominated health service provider are—
	(a)	to form an opinion on the validity or otherwise of the notice referred to in subsection (1); and
	(b)	if the nominated health service provider thinks it appropriate—to explain the grounds of the claim to the consumer;  and
	(c)	to discuss the content of the health record with the consumer, and then—
	(i)	if the provider is satisfied that to do so would not constitute a significant risk to the life or the physical, mental or emotional health of the consumer—to allow the consumer to inspect the health record or, if the consumer so wishes and the record keeper agrees, to have a copy of it; or
	(ii)	if the provider is not so satisfied—to decline to allow the consumer to have access to the health record.
17	No access to health record where material given in confidence
	(1)	A record keeper shall not give access to a health record or part of a health record if, under this section, the health record or part of the record is subject to confidentiality.
	(2)	A health record, or part of a health record, in relation to a consumer is subject to confidentiality if it consists of or includes material or information given in confidence, to the person who wrote the record, by a person other than—
	(a)	the consumer; or
	(b)	a guardian of the consumer; or
	(c)	a health service provider in the course of, or otherwise in relation to, the provider’s treatment of the consumer.
	(3)	A health record, or part of a health record, in relation to a consumer is subject to confidentiality if—
	(a)	the consumer notifies a record keeper to the effect that the consumer wants the health record or part of the record, or information contained in the record or part, to remain confidential; and
	(b)	the record keeper marks the record or part of the record accordingly; and
	(c)	the consumer—
	(i)	becomes a legally incompetent person; or
	(ii)	dies.

Part 4	Complaints and requests to review
18	Grounds
	(1)	A complaint may be made to the commissioner about an act or omission that is alleged to contravene the privacy principles in relation to a consumer.
	(2)	In the case of a complaint about an act or omission that is alleged to contravene the privacy principles in relation to a deceased consumer, it is immaterial whether the contravention occurred, or is alleged to have occurred, in the lifetime or after the death of the deceased consumer.
	(3)	A complaint may be made to the commissioner to review an act or omission that is alleged to constitute a refusal to give access in accordance with this Act to a health record relating to a consumer.
	(4)	A request may be made to the commissioner to review a claim by a record keeper in respect of a health record that there is—
	(a)	a ground under section 14 for nonproduction of the health record; or
	(b)	a ground under section 15 or 17 on which the record keeper is prohibited from giving access to the health record.
	(5)	A complaint or request to review may be made by—
	(a)	unless paragraph (b) applies, the consumer; or
	(b)	if the consumer is a young person or a legally incompetent person—the guardian of the consumer; or
	(c)	if the complaint or request concerns a health record relating to a deceased consumer—the legal representative of the deceased consumer; or
	(d)	a person approved by the commissioner to make the complaint or request on the consumer’s behalf.
19	Application of Community and Health Services Complaints Act 1993
	(1)	A complaint under section 18 (1) or (3) has effect as a complaint for the Community and Health Services Complaints Act 1993 (the Complaints Act).
	(2)	A request to review under section 18 (4) has effect as a request to review for the Complaints Act.
	(3)	A complaint or request to review under section 18 shall—
	(a)	comply with the relevant requirements of the Complaints Act; and
	(b)	be dealt with in accordance with the Complaints Act.

Part 5	Offences
20	Unlawfully requiring consent etc
	(1)	A person shall not, by any unlawful threat or intimidation, or by any false representation, require or purport to require another person—
	(a)	to give a consent under this Act; or
	(b)	to do, without the requisite consent, any act for which a consent under this Act is required.
Maximum penalty:  50 penalty units, imprisonment for 6 months or both.
	(2)	A person shall not make a false representation to a consumer that the consumer is legally required to consent to the provision of a health status report to any person.
Maximum penalty:  50 penalty units, imprisonment for 6 months or both.
21	Unlawful destruction etc. or removal of health records
	(1)	A person shall not destroy, deface or damage a health record or related material with intent to evade or frustrate the operation of this Act.
Maximum penalty:  50 penalty units, imprisonment for 6 months or both.
	(2)	A person shall not remove a health record from the ACT with intent to evade or frustrate the operation of this Act.
Maximum penalty:  50 penalty units, imprisonment for 6 months or both.
22	Unlawfully requesting or obtaining access to health records
A person shall not, by any unlawful threat or intimidation, or by any false representation, request or obtain access to a health record.
Maximum penalty:  50 penalty units, imprisonment for 6 months or both.
23	Persons not to be unlawfully penalised
	(1)	A person shall not, by any unlawful threat or intimidation, or by any false representation, persuade or attempt to persuade another person—
	(a)	to refrain from making or pursuing—
	(i)	a request under part 3 for access; or
	(ii)	a complaint to the commissioner under section 18 (1) or (3); or
	(iii)	a request to review to the commissioner under section 18 (4); or
	(b)	to withdraw any such request, complaint or request to review.
Maximum penalty:  50 penalty units, imprisonment for 6 months or both.
	(2)	It is a defence to a prosecution for an offence against subsection (1) if the defendant proves that—
	(a)	he or she had another ground for engaging in the conduct complained of; and
	(b)	the ground was a reasonable one.
24	Conduct of directors, servants and agents
	(1)	Where, for the purposes of the prosecution of an offence against this part, it is necessary to establish the state of mind of a body corporate or a natural person in relation to particular conduct, it is sufficient to prove that—
	(a)	a director, servant or agent of the body corporate, or a servant or agent of the person—
	(i)	engaged in that conduct; and
	(ii)	had that state of mind; and
	(b)	that conduct was within the scope of the actual or apparent authority of that director, servant or agent.
	(2)	In subsection (1), a reference to the state of mind of a body corporate or person includes a reference to—
	(a)	the knowledge, intention, opinion, belief or purpose of the body corporate or person; and
	(b)	the reasons of the body corporate or person for the intention, opinion, belief or purpose.
	(3)	Any conduct engaged in—
	(a)	on behalf of a body corporate by a director, servant or agent of the body corporate; or
	(b)	on behalf of a natural person by a servant or agent of the person;
within the scope of the actual or apparent authority of that director, servant or agent, is taken, for the purposes of such a prosecution, to have been engaged in also by the body corporate or person.
	(4)	Subsection (3) does not apply if the body corporate or person proves that it, he or she took reasonable precautions, and exercised due diligence, to avoid the conduct.
	(5)	Where—
	(a)	a natural person is convicted of an offence against this part; and
	(b)	the person would not have been convicted of the offence but for subsections (1) and (3);
the person is not liable to be punished by imprisonment for that offence.
	(6)	In this section, a reference to a director of a body corporate includes a reference to a member of a body corporate incorporated for a public purpose by a law of the Territory, the Commonwealth, a State or another Territory.
	(7)	In this section, a reference to engaging in conduct includes a reference to failing or refusing to engage in conduct.

Part 6	Miscellaneous
Note for pt 6
The Legislation Act 2001, s 170 and s 171 deal with the application of the privilege against selfincrimination and client legal privilege.
25	Young persons
Subject to this Act, where a consumer is a young person, a right or power conferred on consumers by this Act—
	(a)	is exercisable on behalf of the consumer by a guardian of the consumer; and
	(b)	is not exercisable by the consumer on his or her own behalf.
26	Legally incompetent persons
	(1)	Subject to this Act, where a consumer is a legally incompetent person, a right or power conferred on consumers by this Act—
	(a)	is exercisable on behalf of the consumer by a guardian of the consumer; and
	(b)	is not exercisable by the consumer on his or her own behalf.
	(2)	A purported consent by a guardian of a legally incompetent person is void if, when giving it, the guardian knows or believes it to be at variance with the wishes expressed, and not changed or withdrawn, by the person before he or she became a legally incompetent person.
27	Deceased consumers
	(1)	The privacy principles apply in relation to a deceased consumer, so far as they are reasonably capable of doing so, in the same way as they apply in relation to a consumer who is not deceased.
	(2)	Subject to subsection (3), where a consumer has died, a right or power conferred on consumers by a provision of this Act is exercisable in relation to the deceased consumer, so far as the circumstances reasonably permit, by a legal representative of the deceased consumer.
	(3)	A purported consent by a legal representative of a deceased consumer is void if, when giving it, the legal representative knows or believes it to be at variance with the wishes expressed, and not changed or withdrawn, by the consumer in his or her lifetime.
29	Defect or invalidity—protection if person acts in good faith etc
If a person takes any action in respect of, or in consequence of having received—
	(a)	a notice or request, made or apparently made under this Act; or
	(b)	a consent or authorisation, given or apparently given under this Act;
that is void or defective, the person is not liable in respect of the action by reason only that the notice, request, consent or authorisation was void or defective, if the person proves that he or she—
	(c)	took the action in good faith; and
	(d)	did not know, and had no reason to be aware, when taking the action, that the notice, request, consent or authorisation was void or defective (as the case may be).
30	Unqualified record keeper to obtain and act on expert advice
If a record keeper lacks the skill or training necessary to perform a function under this Act, the record keeper shall, for the purpose of performing the function, obtain and act on the advice, in respect of the function, of a person possessing such skill and training.
31	Jurisdiction of Magistrates Court
	(1)	Application may be made to the Magistrates Court (the court) for—
	(a)	a declaration that, for this Act, a person has, or does not have, the status under this Act of—
	(i)	a legally incompetent person; or
	(ii)	a guardian of a legally incompetent person; or
	(iii)	a young person; or
	(iv)	a guardian of a young person; or
	(v)	a legal representative of a deceased person; or
	(b)	a declaration that, for this Act, anything done or purportedly done under this Act was, or was not, validly done; or
	(c)	an order restraining a person from destroying, defacing or damaging, or removing from the ACT, any health record or related material; or
	(d)	such other order (including a restraining order) in relation to a matter arising under this Act as the court may think proper to make.
	(2)	An application may be made by—
	(a)	the commissioner; or
	(b)	any person who has a sufficient interest in the matter to warrant the making by the person of the application.
	(3)	The court may make, vary or revoke a declaration or order of a kind referred to in subsection (1).
	(4)	The court shall not make, vary or revoke a restraining order in respect of a person unless it is proved that the application for the court to do so has been served on, or brought to the notice of, the person.
	(5)	Despite subsection (4), if the court is satisfied by oral or affidavit evidence that the interests of justice so require, the court may make, vary or revoke an interim restraining order in the absence of such proof.
	(6)	If the court makes a restraining order (including an interim restraining order), the registrar of the court shall cause a copy of the order to be served as follows:
	(a)	if practicable, and subject to paragraph (b), on the respondent personally; 
	(b)	if the court makes an order for the substituted or other service of such a copy—in accordance with that order.
	(7)	In relation to proceedings and orders on, or arising out of, an application for a restraining order (including an interim restraining order), the following provisions of the Magistrates Court Act 1930 apply so far as they are reasonably capable of doing so:
	(a)	section 206B;
	(b)	section 206E, other than subsection (1) (f);
	(c)	section 206G;
	(d)	sections 206H (1), (3), (4) and (5) and 206J (1);
	(e)	sections 206L, 206M and 206N.
32	Appeals
	(1)	An appeal to the Supreme Court may be brought as of right from—
	(a)	the making, variation or revocation of a declaration or order under section 31; or
	(b)	a refusal of the Magistrates Court to make, vary or revoke such a declaration or order.
	(2)	The Magistrates Court (Civil Jurisdiction) Act 1982, part 21 (other than sections 387 and 388) applies in relation to such an appeal.
	(3)	Despite subsection (1), an appeal does not lie (whether as of right or by leave) from—
	(a)	the making, variation or revocation of an interim restraining order under section 31; or
	(b)	a refusal of the Magistrates Court to make, vary or revoke such an order.
33	Court orders under other laws
	(1)	This Act does not prevent a court of competent jurisdiction from making, or continuing in force, under a law of the Territory an order in such terms that compliance with it would, apart from the order, constitute a contravention of this Act.
	(2)	Nevertheless, in deciding whether to make, or continue in force, an order in such terms the court shall have regard to the relevant provisions of this Act. 
34	Determination of fees
	(1)	The Minister may, in writing, determine fees for this Act.
Note	The Legislation Act 2001 contains provisions about the making of determinations and regulations relating to fees (see pt 6.3).
	(2)	A determination is a disallowable instrument.
Note	A disallowable instrument must be notified, and presented to the Legislative Assembly, under the Legislation Act 2001.
35	Approved forms
	(1)	The commissioner may, in writing, approve forms for this Act.
	(2)	If the commissioner approves a form for a particular purpose, the form must be used for that purpose.
	(3)	An approved form is a notifiable instrument.
Note	A notifiable instrument must be notified under the Legislation Act 2001.
36	Regulation-making power
	(1)	The Executive may make regulations for this Act.
Note	Regulations must be notified, and presented to the Legislative Assembly, under the Legislation Act 2001.
	(2)	The regulations may—
	(a)	extend, by not more than 21 days, the time within which something must or may be done for this Act; or
	(b)	make provision about the keeping and transfer of health records; or
	(c)	prescribe qualifications to be held, or other requirements to be met, by record keepers in relation to possession or control of health records.
	(3)	The regulations may also prescribe offences for contraventions of the regulations and may prescribe maximum penalties of not more than 10 penalty units for offences against the regulations.
37	Saving
This Act shall not be read as affecting, except to the extent that it does so expressly or by necessary implication, the operation of a law of the Territory that relates to access to, or privacy or confidentiality in relation to, a document or a kind or class of document.

Endnotes
1	About the endnotes
Amending and modifying laws are annotated in the legislation history and the amendment history.  Current modifications are not included in the republished law but are set out in the endnotes.
Not all editorial amendments made under the Legislation Act 2001, part 11.3 are annotated in the amendment history.  Full details of any amendments can be obtained from the Parliamentary Counsel’s Office.
Uncommenced amending laws and expiries are listed in the legislation history and the amendment history.  These details are underlined.  Uncommenced provisions and amendments are not included in the republished law but are set out in the last endnote.
If all the provisions of the law have been renumbered, a table of renumbered provisions gives details of previous and current numbering.  
The endnotes also include a table of earlier republications.
If the republished law includes penalties, current information about penalty unit values appears on the republication inside front cover.
2	Abbreviation key

am = amended	ord = ordinance	
amdt = amendment	orig = original	
ch = chapter	p = page	
cl = clause	par = paragraph	
def = definition	pres = present	
dict = dictionary	prev = previous	
disallowed = disallowed by the Legislative 	(prev...) = previously	
Assembly	prov = provision	
div = division	pt = part	
exp = expires/expired	r = rule/subrule	
Gaz = Gazette	reg = regulation/subregulation	
hdg = heading	renum = renumbered	
ins = inserted/added	reloc = relocated	
LA = Legislation Act 2001	R[X] = Republication No	
LR = legislation register	s = section/subsection	
LRA = Legislation (Republication) Act 1996	sch = schedule	
mod = modified / modification	sdiv = subdivision	
No = number	sub = substituted	
num = numbered	SL  = Subordinate Law	
o = order	underlining = whole or part not commenced	
om = omitted/repealed	or to be expired	
3	Legislation history
Health Records (Privacy and Access) Act 1997 No 125
notified 24 December 1997 (Gaz 1997 No S420)
commenced 1 February 1998 (s 2)
as amended by
Legislation (Consequential Amendments) Act 2001 No 44 pt 181
notified 26 July 2001 (Gaz 2001 No 30)
s 1, s 2 commenced 26 July 2001 (IA s 10B)
pt 181 commenced 12 September 2001 (s 2 and Gaz 2001 No S65)
Legislation Amendment Act 2002 No 11 pt 2.26
notified LR 27 May 2002
s 1, s 2 commenced 27 May 2002 (LA s 75)
pt 2.26 commenced 28 May 2002 (s 2 (1))
4	Amendment history
Commencement
s 2	om 2001 No 44 amdt 1.2068
Definitions for Act
s 4	def this Act om 2001 No 44 amdt 1.2069
Miscellaneous
pt 6 note	ins 2002 No 11 amdt 2.50
Legal professional privilege not affected by this Act
s 28	om 2002 No 11 amdt 2.51
Determination of fees
s 34	sub 2001 No 44 amdt 1.2070
Approved forms
s 35	sub 2001 No 44 amdt 1.2070
Regulation-making power
s 36	sub 2001 No 44 amdt 1.2070
Amendments of other Acts
sch	om 2001 No 44 amdt 1.2071
5	Earlier republications
Some earlier republications were not numbered. The number in column 1 refers to the publication order.  
Since 12 September 2001 every authorised republication has been published in electronic pdf format on the ACT legislation register.  A selection of authorised republications have also been published in printed format. These republications are marked with an asterisk (*) in column 1.  Except for the footer, electronic and printed versions of an authorised republication are identical. 

Republication No	Amendments to	Republication date	
1	Act 2001 No 44	24 January 2002	

Unauthorised version prepared by ACT Parliamentary Counsel's Office

©  Australian Capital Territory 2002